Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/fa5c0192-914d-3a10-95c0-c4d44e1dc5d3.roa
File:                     fa5c0192-914d-3a10-95c0-c4d44e1dc5d3.roa (raw, json)
Hash identifier:          itD7ztVI8OWJQ9Wk5r7f9SO/XI5JVdrEvUcHOKu7c1Q=
Subject key identifier:   4F:C8:2D:72:E7:26:37:5B:E5:7F:92:75:89:56:56:D4:28:5E:5B:91
Certificate issuer:       /CN=f952e113-8fae-44f8-9d98-a496f4e2fdc6
Certificate serial:       010D0C9F4328584AF2567E4E42FBED69E8D6E790
Authority key identifier: 6A:B0:45:6B:89:75:14:9C:61:DD:E1:81:6E:F1:23:F2:97:8A:E7:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/fa5c0192-914d-3a10-95c0-c4d44e1dc5d3.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     11714
IP address blocks:        204.234.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/f952e113-8fae-44f8-9d98-a496f4e2fdc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/f952e113-8fae-44f8-9d98-a496f4e2fdc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:7e:4e:42:fb:ed:69:e8:d6:e7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952e113-8fae-44f8-9d98-a496f4e2fdc6
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=c7958989-888b-4a92-a196-10aa43dc9467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:56:a2:03:8c:20:b9:3f:10:27:4c:05:ae:41:
                    4b:2c:e5:d7:f4:37:1f:dd:60:4e:7b:df:d1:b9:83:
                    92:ff:bd:0b:41:17:bb:65:79:77:0a:74:25:97:c5:
                    e8:ff:7f:ee:d3:bd:e2:4a:1f:a0:8e:fd:38:2a:65:
                    ef:74:80:5c:fb:af:81:8e:98:65:71:68:35:4f:e6:
                    6e:42:5e:db:a9:b9:04:67:d4:9f:3c:b8:4a:f5:21:
                    31:88:eb:cc:76:90:47:13:86:a7:ec:10:b5:1c:96:
                    fa:0d:f0:9d:a0:3a:ec:4d:e7:0a:d3:26:3f:de:dd:
                    04:c3:53:e0:f4:ae:c2:e1:d8:82:3f:1e:d6:ba:9e:
                    dd:42:7d:b7:fd:22:2e:0c:70:b2:b7:ba:be:4a:f3:
                    3b:35:e6:01:49:ea:7b:9a:7c:e4:43:05:1c:4e:0c:
                    45:6d:1d:da:d4:9d:0c:54:ae:6e:96:34:84:a4:47:
                    c3:ec:68:93:35:5f:17:9c:19:32:eb:70:d9:80:6a:
                    f6:16:63:c3:9b:79:26:ed:31:7f:e6:78:d3:05:cc:
                    e7:5c:4d:cf:51:da:8a:97:45:47:e9:b9:41:22:de:
                    eb:2f:5c:e5:79:f4:f2:9c:5d:b6:ba:40:b9:45:fd:
                    a6:65:ad:7b:88:7c:2d:4d:b4:76:9d:54:1d:80:15:
                    c8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C8:2D:72:E7:26:37:5B:E5:7F:92:75:89:56:56:D4:28:5E:5B:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/fa5c0192-914d-3a10-95c0-c4d44e1dc5d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/f952e113-8fae-44f8-9d98-a496f4e2fdc6.crl

            X509v3 Authority Key Identifier:
                keyid:6A:B0:45:6B:89:75:14:9C:61:DD:E1:81:6E:F1:23:F2:97:8A:E7:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.234.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:15:7c:9d:74:9a:8f:9d:69:95:94:78:c1:91:80:50:2b:d8:
         0a:69:33:30:f6:5a:be:93:ba:2f:b9:b0:56:db:43:be:a3:d3:
         4d:a3:6a:38:e6:44:73:63:02:6e:07:97:c9:41:87:3e:a5:1a:
         60:79:1e:bd:11:02:78:9b:b1:77:c2:da:f2:34:d3:89:b6:6a:
         29:4b:0f:a4:d1:44:5d:0d:cd:67:ee:0b:62:a9:30:37:64:86:
         7b:f9:71:8d:e7:8a:af:1b:71:7e:e1:b2:0f:8b:69:03:a3:25:
         d6:9a:e6:78:52:84:22:f5:f0:2a:15:59:c6:8f:a8:7c:52:65:
         1b:ab:7b:df:0c:a8:c8:eb:87:81:68:61:01:94:66:5f:a3:ad:
         ee:2c:8c:a7:ce:6c:15:1f:15:e9:39:ab:3a:ea:56:c0:4e:65:
         cb:48:5d:44:03:36:c7:3d:ca:4d:56:87:b2:0f:5b:67:d8:c8:
         0a:11:2e:6a:cf:d4:ab:f3:0e:63:17:29:9c:b6:28:9e:3e:67:
         08:6d:37:e0:fb:1f:91:a1:f0:eb:94:2e:17:1b:9a:04:22:1f:
         a8:e4:8a:32:33:08:c5:a5:83:f8:6a:d0:06:05:d0:88:8b:f5:
         22:56:4a:29:3c:b8:f1:f7:11:9e:9d:23:46:3e:20:e9:b6:d8:
         b0:38:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:14:09 2025 by rpki-client